graygnuorg/pound v4.21

Version 4.21

on GitHub

Changes in Lua API

• http.balancer

  Balancer group of the currently selected backend. Setting this field to a numeric value instructs pound to re-send the request to a backend from the balancer group with the weight greater than or equal to the value supplied.

• http.resendcount

  Keeps number of resending attempts underwent by the current request.

• http.service.name

  Name of the currently selected service. Assigning to this variable instructs pound to send the current request to the named service. Assigning a nil also implies to rerun service selection from the beginning.

• http.service.locus

  Location of the currently selected service in the configuration file.

Setting ciphersuites for TLSv3

The syntax of the Ciphers statement (ListenHTTPs and Backend sections) has been extended to allow for specifying ciphersuites for TLSv3 protocol. The new syntax is:

Ciphers [typeopt] "cipherlist" ...

where optional typeopt defines how to interpret the cipherlist argument that follows it. Its possible values are:

• -cipherlist
  Sets the list of ciphers that affects only TLSv2 and prior protocols. This is the default.

• -ciphersuites
  Sets the list of TLSv3 ciphersuites. It will be combined with any TLSv1.2 and below cipher lists that may have been configured.

Notice, that a single Ciphers statement can set both TLSv2 and TLSv3 ciphersuites:

 Ciphers "HIGH:@STRENGTH:!RSA" -ciphersuites "TLS_AES_256_GCM_SHA384"

New configuration setting: WorkerStackSize

Sets the worker thread stack size, in bytes.

Lua compile-time check

The compile-time check for Lua no longer depends on pkg-config.